Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/0_EpdViy3Y27mqejc66l1--sjBk.roa
File: 0_EpdViy3Y27mqejc66l1--sjBk.roa (raw, json)
Hash identifier: 5pxFxSH3+mNeuLlB3lfUr3Q81qL23oDYt7nqdhFYvqU=
Subject key identifier: D3:F1:29:75:58:B2:DD:8D:BB:9A:A7:A3:73:AE:A5:D7:EF:AC:8C:19
Certificate issuer: /CN=2bc8695772f0e64f3b9a1621733cc02506f74702
Certificate serial: 0194258FA558789204A0F485584F0DF261EF
Authority key identifier: 2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/0_EpdViy3Y27mqejc66l1--sjBk.roa
Signing time: Thu 02 Jan 2025 05:49:18 +0000
ROA not before: Thu 02 Jan 2025 05:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13044
IP address blocks: 91.188.208.0/24 maxlen: 24
91.188.209.0/24 maxlen: 24
91.188.210.0/24 maxlen: 24
91.188.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a5:58:78:92:04:a0:f4:85:58:4f:0d:f2:61:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc8695772f0e64f3b9a1621733cc02506f74702
Validity
Not Before: Jan 2 05:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3f1297558b2dd8dbb9aa7a373aea5d7efac8c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:91:75:ac:1b:a7:fc:45:16:00:6e:00:8a:06:
35:26:14:ca:54:f6:58:ad:dd:39:33:84:08:1a:f4:
96:43:a1:c0:ee:d2:04:46:55:53:fc:30:f3:4e:5c:
85:ad:1d:db:55:c3:1a:b7:da:9f:df:5a:bd:ae:15:
4f:3c:3d:09:89:7f:f1:aa:e8:5a:1e:06:7b:a7:b5:
d0:c7:f7:72:ee:b8:31:a4:89:70:2e:db:0e:1c:58:
50:98:61:c1:e3:71:4d:3b:e5:b9:3a:3a:82:2c:78:
7e:51:56:e0:c0:3c:95:33:97:05:96:bc:ff:48:6c:
a2:f5:fe:69:39:9b:d8:fa:80:15:0f:74:b6:49:e4:
30:08:89:ad:0b:33:18:22:10:2e:1f:a1:57:c8:0a:
15:ae:fb:b3:51:84:f3:3b:64:c2:ee:42:09:fc:50:
68:98:37:48:a3:39:ea:e6:8e:3f:85:40:2b:41:50:
94:06:f0:7d:71:1a:71:64:35:0a:43:99:5d:95:5f:
51:bf:4f:dd:c1:60:58:c4:75:bc:89:c7:f6:c7:5d:
50:33:82:4e:84:6c:0d:c7:44:08:9a:89:b7:46:be:
80:a0:c1:0e:4a:fa:0a:7b:3a:22:52:2a:10:82:40:
b4:e6:bb:9d:38:18:e4:3d:e8:7f:9e:e0:bd:82:36:
b1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F1:29:75:58:B2:DD:8D:BB:9A:A7:A3:73:AE:A5:D7:EF:AC:8C:19
X509v3 Authority Key Identifier:
keyid:2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/0_EpdViy3Y27mqejc66l1--sjBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.208.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:48:b1:18:69:b7:31:81:4c:bb:14:28:6a:2b:48:0f:40:12:
fe:0d:29:86:9f:34:66:81:c2:23:e8:64:1d:b1:2d:b6:d9:ce:
c0:30:e9:40:35:98:5f:7d:d1:84:2f:0d:3b:c0:44:b4:03:9c:
30:e0:30:b6:66:e6:53:fc:8c:95:6d:2c:ff:28:25:81:31:68:
78:69:e8:b9:b8:bf:05:21:0d:64:37:10:6d:74:d2:cd:28:c8:
f3:b7:b5:13:96:48:65:70:15:f1:53:73:41:57:7c:e4:c0:24:
0e:8c:6d:62:04:cf:ba:ff:94:d9:af:ec:cb:47:bb:e9:4a:1c:
c6:bf:09:ea:44:4e:ff:a5:b2:bf:f6:2d:b5:a4:e4:74:85:ed:
56:df:11:c6:31:9d:f4:1a:0b:ff:86:87:b3:ff:c4:94:44:50:
5c:51:6d:a5:60:de:44:0b:74:e9:41:bf:67:af:a2:ae:f4:f9:
66:f7:99:3a:d1:a1:55:9a:ae:c3:74:a7:33:30:a8:a7:14:90:
47:1d:da:df:20:51:43:09:df:50:be:d8:be:b2:7b:95:d4:b9:
7d:38:8c:90:6a:2e:b6:42:37:e8:f6:70:9e:ba:0f:5d:89:a7:
aa:d4:83:7b:a8:65:a8:14:6a:39:3c:0f:58:37:de:86:4c:73:
2b:f0:68:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj6VYeJIEoPSFWE8N8mHvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYzg2OTU3NzJmMGU2NGYzYjlhMTYyMTczM2NjMDI1MDZm
NzQ3MDIwHhcNMjUwMTAyMDU0OTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2YxMjk3NTU4YjJkZDhkYmI5YWE3YTM3M2FlYTVkN2VmYWM4YzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJF1rBun/EUWAG4AigY1JhTKVPZY
rd05M4QIGvSWQ6HA7tIERlVT/DDzTlyFrR3bVcMat9qf31q9rhVPPD0JiX/xquha
HgZ7p7XQx/dy7rgxpIlwLtsOHFhQmGHB43FNO+W5OjqCLHh+UVbgwDyVM5cFlrz/
SGyi9f5pOZvY+oAVD3S2SeQwCImtCzMYIhAuH6FXyAoVrvuzUYTzO2TC7kIJ/FBo
mDdIoznq5o4/hUArQVCUBvB9cRpxZDUKQ5ldlV9Rv0/dwWBYxHW8icf2x11QM4JO
hGwNx0QImom3Rr6AoMEOSvoKezoiUioQgkC05rudOBjkPeh/nuC9gjaxvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNPxKXVYst2Nu5qno3OupdfvrIwZMB8GA1UdIwQY
MBaAFCvIaVdy8OZPO5oWIXM8wCUG90cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzhocFYzTHc1azg3bWhZaGN6ekFKUWIzUndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9jYmZhOWItMDI5MS00OGUzLTgwNWMt
NDNkNjZhMDMzMWVjLzEvMF9FcGRWaXkzWTI3bXFlamM2NmwxLS1zakJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9jYmZhOWItMDI5MS00OGUzLTgwNWMtNDNkNjZhMDMzMWVj
LzEvSzhocFYzTHc1azg3bWhZaGN6ekFKUWIzUndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW7zQMA0G
CSqGSIb3DQEBCwUAA4IBAQA/SLEYabcxgUy7FChqK0gPQBL+DSmGnzRmgcIj6GQd
sS222c7AMOlANZhffdGELw07wES0A5ww4DC2ZuZT/IyVbSz/KCWBMWh4aei5uL8F
IQ1kNxBtdNLNKMjzt7UTlkhlcBXxU3NBV3zkwCQOjG1iBM+6/5TZr+zLR7vpShzG
vwnqRE7/pbK/9i21pOR0he1W3xHGMZ30Ggv/hoez/8SURFBcUW2lYN5EC3TpQb9n
r6Ku9Plm95k60aFVmq7DdKczMKinFJBHHdrfIFFDCd9Qvti+snuV1Ll9OIyQai62
Qjfo9nCeug9diaeq1IN7qGWoFGo5PA9YN96GTHMr8Ghn
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:41:21 2025 by rpki-client